Quality Engineer

About the Role

Enables full stack solutions through multi-disciplinary team planning and ecosystem integration to accelerate delivery and drive quality across the application lifecycle. Performs continuous testing for security, API, and regression suite. Creates automation strategy, automated scripts and supports data and environment configuration. Participates in code reviews, monitors, and reports defects to support continuous improvement activities for the end-to-end testing process.

Key Responsibilities

• Operate and maintain a hybrid identity architecture based on on-premise Active Directory and Entra ID in the M365 cloud.
• Manage Azure AD Connect synchronization, including monitoring, troubleshooting, and lifecycle management.
• Administer Active Directory core services, including:
• Domains and trusts
• Sites and Services
• Replication topology
• DNS integration
• Ensure high availability, performance, and stability of directory services.
• Identity and Access Management.
• Administer Entra ID and Microsoft 365 tenant configuration.
• Manage and optimize:
• Conditional Access Policies
• Identity protection and authentication methods
• Tenant-wide security and identity settings
• Support application integrations and identity federation scenarios.
• Review and validate requests to ensure compliance with internal standards and processes.
• Implement approved requests in a controlled and auditable manner.
• Access management and permission delegation through Quest Active Roles.
• Security, Hardening & Compliance:
• Harden AD, Entra ID, and M365 environments based on security best practices and frameworks (e.g., CIS Benchmarks).
• Ensure:
• Least-privilege access models
• Secure authentication and authorization designs
• Regular review of privileged roles and access paths
• Minimize risks for cyber-attacks or similar vulnerabilities
• Support audits, security assessments, and remediation activities.
• Governance, Auditing and Reporting of AD by using Quest's Active Administrator, Change Auditor, Enterprise Reporter and IT Security Search.
• Mergers & Acquisitions (M&A):
• Support M&A activities from an identity perspective, including:
• B2B collaboration and external identity enablement
• Migration from legacy AD and M365 environments, including using Quest On-Demand Migration.
• Tenant-to-tenant and directory consolidation scenarios.
• Design and execute secure migration strategies with minimal business disruption.
• Backup & Recovery:
• AD backup and recovery through Quest Recovery Manager.
• Manage Commvault Cloud (Metallic) as the M365 backup and recovery solution.
• Ensure:
• Regular backup validation
• Recovery readiness for identities, M365 workloads, and configurations
• Compliance with retention and recovery requirements.
• Automation & IAM Integration:
• Automation of tasks through PowerShell scripting.
• Support the design and implementation of self-service workflows for identity-related use cases.
• Collaborate closely with the IAM team to:
• Align AD and M365 processes with SailPoint.
• Migrate or redesign existing Quest Active Roles workflows into SailPoint.
• Promote automation, standardization, and reduction of manual administrative effort.
• Service Management & Collaboration:
• Work within ITIL-based processes, including:
• Incident Management
• Service Request Fulfilment
• Problem Management
• Act as a technical consultant for internal teams and stakeholders.
• Provide 2nd and 3rd level support for identity-related issues.

Requirements & Tech Stack

• AWS Administration
• Active Directory
• Entra ID
• M365
• Azure AD Connect
• Microsoft 365
• Quest Active Roles
• CIS Benchmarks
• Quest's Active Administrator
• Change Auditor
• Enterprise Reporter
• IT Security Search
• Quest On-Demand Migration
• Quest Recovery Manager
• Commvault Cloud (Metallic)
• PowerShell
• SailPoint
• ITIL

Qualifications

• Minimum 2 year(s) of experience is required.
• Minimum 2 years of experience in AWS Administration.
• 15 years full time education is required.

Professional & Technical Skills

• Technical Skills:
• Strong expertise in on-premise Active Directory architecture and operations.
• In-depth knowledge of Entra ID and Microsoft 365 identity services.
• Sophisticated scripting knowledge, especially Microsoft PowerShell.
• Hands-on experience with Azure AD Connect.
• Solid understanding of:
• Authentication and authorization concepts
• Identity lifecycle management
• Experience with Quest Active Directory management and migration tools.
• Knowledge of backup and recovery concepts for identity and M365 workloads, ideally based on Commvault Cloud (also called Metallic).
• Security & Governance:
• Strong understanding of identity security best practices including resilience against cyber-attacks.
• Experience applying security frameworks (e.g., CIS).
• Ability to assess risks and enforce governance standards.
• Familiarity with audit, compliance, and reporting requirements.
• Professional & Methodological Skills:
• Experience working in ITIL-based service organizations.
• Structured, analytical, and proactive working style.
• High level of service orientation and customer focus.
• Ability to prioritize tasks and work effectively under pressure.
• Strong problem-solving and troubleshooting skills.
• Communication & Personal Skills:
• Very good communication skills across technical and non-technical stakeholders.
• Team-oriented mindset with the ability to work independently.
• High level of responsibility and ownership.
• Resilience, flexibility, and adaptability in complex environments.
• Fluent English, written and verbal (German is a plus).